Under the Act, most organisations that process personal information electronically must notify the ICO.

However, its records show that only half the UK’s recruitment and employment agencies are registered as data controllers.

Failure to notify the ICO can result in prosecution and fines. Recently, the ICO successfully prosecuted a number of organisations for failure to comply, including one recruitment company which had to pay a £2,000 fine.